CVE-2020-8200: 
Citrix StoreFront vulnerability analysis and mitigation

A high severity vulnerability (CVE-2020-8200) was discovered in Citrix StoreFront that allows an authenticated attacker on the same Microsoft Active Directory domain as a Citrix StoreFront server to read arbitrary files from that server (Citrix Support).

The vulnerability affects supported Current Release (CR) versions of Citrix StoreFront. The issue requires the attacker to be authenticated in the same Microsoft Active Directory domain as the StoreFront server for successful exploitation (AttackerKB).

If successfully exploited, this vulnerability allows an authenticated attacker to gain arbitrary file read access on the StoreFront server, which could potentially lead to further system compromise depending on the sensitivity of the data that can be accessed (AttackerKB).

Updates are available for the following versions: Citrix StoreFront 1912 CU1 (1912.0.1000) and later versions of Citrix StoreFront 1912 LTSR, Citrix StoreFront 3.0 for 7.6 LTSR CU8 Hotfix (3.0.8001) and later versions of StoreFront 3.0 for 7.6 LTSR, and Citrix StoreFront 3.12 for 7.15 LTSR CU5 Hotfix (3.12.5001) and later versions of StoreFront 3.12 for 7.15 LTSR (AttackerKB).